Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FT8hyvYo6W6JuupXa2LFg32GGY4.roa
File: FT8hyvYo6W6JuupXa2LFg32GGY4.roa (raw, json)
Hash identifier: CQyEHdXvW51L1mcHq1F3jXiPj/n3zEIeM+YiASpDsuE=
Subject key identifier: 15:3F:21:CA:F6:28:E9:6E:89:BA:EA:57:6B:62:C5:83:7D:86:19:8E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019102B16155CC1470482FFA5937A56418E6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FT8hyvYo6W6JuupXa2LFg32GGY4.roa
Signing time: Tue 30 Jul 2024 08:11:04 +0000
ROA not before: Tue 30 Jul 2024 08:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.240.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:b1:61:55:cc:14:70:48:2f:fa:59:37:a5:64:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 30 08:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=153f21caf628e96e89baea576b62c5837d86198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:3c:36:42:2c:49:ca:65:bb:ed:17:90:39:
0e:b4:0a:ad:9f:30:97:71:3d:7b:b4:c6:c7:d5:a5:
a9:8c:b9:3e:93:ca:05:7f:e1:b3:97:8a:53:a5:9b:
1a:9d:38:a8:cb:28:38:f5:f2:40:9d:ba:bb:69:eb:
f4:ac:ee:ed:bb:f2:51:43:51:0f:fd:5a:bb:75:dc:
8f:3f:b9:26:12:ba:99:80:78:23:fa:8a:42:78:22:
59:d8:96:58:a3:f8:a2:c2:b1:e4:bf:f4:09:00:17:
fc:3f:41:68:84:96:96:c0:0b:f1:2e:1a:e6:b5:0b:
4e:72:a8:2e:ce:cb:4c:19:1a:f4:3a:b2:3d:7c:53:
ae:79:57:03:e1:a8:01:e8:ec:62:6a:d0:58:79:28:
7b:df:0d:0e:f4:e3:33:45:ba:18:03:5c:23:a4:b6:
de:4e:ba:67:e6:cf:4b:78:31:9f:85:0e:ca:3f:2f:
75:8e:79:9c:68:4d:22:71:3c:40:3a:0e:81:78:dc:
ec:36:57:66:93:1d:de:9f:ff:ce:7a:08:6e:9e:c8:
29:a7:f5:65:8d:cc:a8:20:5f:7a:ee:dd:db:ba:cd:
41:6d:fb:42:6e:de:e1:8f:5c:8a:9d:52:0d:4e:b5:
04:9a:19:dc:32:0f:97:77:55:00:b2:3b:c2:4f:e4:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3F:21:CA:F6:28:E9:6E:89:BA:EA:57:6B:62:C5:83:7D:86:19:8E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FT8hyvYo6W6JuupXa2LFg32GGY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
90:77:57:a4:a4:43:83:38:e3:8b:cf:f2:19:70:e4:07:77:e7:
0c:02:6e:f4:83:5c:ae:08:d7:d8:97:6e:ab:54:28:3f:c0:1b:
7d:96:4b:74:91:3e:4d:f5:05:6d:ba:62:ca:99:3c:1b:d4:09:
5a:7e:19:f1:f2:ff:81:d1:73:44:86:c5:f1:20:dd:3c:67:5d:
ec:fb:4d:fb:32:50:d2:36:83:9f:2b:75:3b:0a:fd:53:66:46:
0d:44:24:5b:dd:c0:c7:0b:67:8e:8f:17:3b:7c:e3:92:f1:90:
62:dd:af:f0:3a:00:91:dd:f4:c2:a6:65:4b:66:99:04:ce:ff:
ac:a8:ce:0b:97:1d:81:50:1f:21:c6:b0:be:48:17:24:da:aa:
3d:10:39:a6:24:79:d8:c7:56:d0:d6:7d:8b:6c:30:9e:11:7f:
36:69:a5:0d:ca:23:97:e2:35:5a:bb:38:29:77:77:c9:f2:bf:
f4:bc:8a:39:d7:50:e8:0d:44:56:62:bc:75:8f:fa:64:e2:d8:
7b:0d:4f:cb:93:f1:da:62:b1:d7:ef:c7:4a:59:ce:97:5b:1f:
f5:94:19:0f:7d:4d:7c:96:f9:4c:0a:f9:e9:d3:9d:7b:83:65:
1b:52:8f:3a:69:65:3c:f4:42:f6:8b:42:a5:ce:de:37:5b:84:
20:f7:b2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:30 2024 by rpki-client on console-ams.rpki-client.org